This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/u5KaxC_LjZl4glkpkZdsvGnJ4pk.roa File: u5KaxC_LjZl4glkpkZdsvGnJ4pk.roa (raw, json) Hash identifier: Go7rnWsx0cmxk8Ezurf4VMcNVol6bQI4xHvGGXPZG0k= Subject key identifier: BB:92:9A:C4:2F:CB:8D:99:78:82:59:29:91:97:6C:BC:69:C9:E2:99 Certificate issuer: /CN=f0d03098b8356fffc5a597e9c45b84edf87cf994 Certificate serial: 019B7AC8D506FC0A88993A3C10051D9B2418 Authority key identifier: F0:D0:30:98:B8:35:6F:FF:C5:A5:97:E9:C4:5B:84:ED:F8:7C:F9:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/u5KaxC_LjZl4glkpkZdsvGnJ4pk.roa Signing time: Thu 01 Jan 2026 18:19:00 +0000 ROA not before: Thu 01 Jan 2026 18:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8758 IP address blocks: 193.221.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.crl rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft rsync://rpki.ripe.net/repository/DEFAULT/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:d5:06:fc:0a:88:99:3a:3c:10:05:1d:9b:24:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0d03098b8356fffc5a597e9c45b84edf87cf994 Validity Not Before: Jan 1 18:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bb929ac42fcb8d997882592991976cbc69c9e299 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b5:da:64:77:27:f8:e7:a8:47:31:3f:82:52: 28:14:35:45:b2:14:f4:af:08:02:c0:1b:1e:83:a8: 6d:a8:4a:3d:94:70:e5:9e:80:9a:5e:e1:cd:f0:42: c3:b2:39:f9:f8:aa:7f:50:2a:73:56:2f:42:08:b6: 0e:16:58:a8:5a:46:5c:a8:d6:1f:c6:b5:03:7c:b9: 11:96:30:1f:de:b1:80:c5:aa:18:18:33:84:00:c2: de:ba:85:a0:0a:d2:b8:b3:02:a6:80:a3:e6:0c:43: 0e:96:3b:77:4d:aa:56:fa:9c:6d:7b:bd:ad:2d:03: 99:79:66:d3:55:61:b7:19:b3:f3:2d:59:1f:9e:61: 16:8a:c0:cb:ee:00:88:85:bb:61:ff:ea:2a:b5:d4: fa:03:e5:02:9e:fd:7e:54:df:fd:82:91:41:4f:8d: 60:0a:90:1b:c7:af:89:67:27:ff:f6:c4:f5:1d:d1: 5f:83:ca:71:66:79:26:40:f5:7c:cf:b3:48:cb:a7: fa:2e:00:9e:7d:0b:8a:40:00:e1:86:76:d8:72:6e: 7d:d8:8f:27:dd:0b:ae:47:7a:0c:94:59:19:a2:8a: 19:34:39:a2:cd:04:9c:88:20:f1:8b:af:91:9e:b8: dd:00:ce:f7:49:54:60:00:e3:25:ab:57:f4:ae:25: 0d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:92:9A:C4:2F:CB:8D:99:78:82:59:29:91:97:6C:BC:69:C9:E2:99 X509v3 Authority Key Identifier: keyid:F0:D0:30:98:B8:35:6F:FF:C5:A5:97:E9:C4:5B:84:ED:F8:7C:F9:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/u5KaxC_LjZl4glkpkZdsvGnJ4pk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.221.116.0/24 Signature Algorithm: sha256WithRSAEncryption 71:ce:ba:b2:1d:35:31:a2:08:d3:ef:98:ea:90:03:80:46:70: 55:4d:1a:d2:46:ea:32:0a:2f:4d:b3:87:5c:f6:9f:e7:ae:16: 3b:1a:0a:de:8f:a3:0f:65:80:77:9a:df:fd:88:0c:3a:72:f7: c6:68:13:f3:76:af:db:e6:cb:0a:20:73:ab:88:0a:23:d4:c8: 67:f8:b5:e4:2f:69:77:1e:29:f6:11:0b:8d:ef:ae:cc:ce:09: 7f:73:6f:d5:58:a3:3c:27:14:cb:cd:4a:0b:e6:66:a6:e0:4d: c0:c2:87:53:88:ce:db:ee:f1:03:b5:83:b7:f7:d6:25:14:c4: 4e:51:5f:a2:19:9c:a4:4b:81:b9:9a:7d:86:34:3b:ec:52:07: a9:8c:e4:79:b2:87:69:1b:7d:bf:53:05:e1:00:1f:01:74:ea: c4:2e:cb:a1:16:72:28:0f:dd:46:fb:45:33:98:50:d6:83:c5: 30:7d:2d:93:f5:49:e4:b0:50:b2:8d:f9:c2:e4:da:f4:0a:5f: 6b:1e:d9:58:4f:19:70:cc:f3:78:28:64:4e:79:d9:10:78:c5: 99:d4:17:5e:86:b4:f5:99:63:bd:cc:50:48:2c:d3:bc:67:51: cb:f8:b1:4d:7c:7d:03:a7:94:65:2f:97:61:21:f5:68:f9:01: 42:65:b0:f9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yNUG/AqImTo8EAUdmyQYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZDAzMDk4YjgzNTZmZmZjNWE1OTdlOWM0NWI4NGVkZjg3 Y2Y5OTQwHhcNMjYwMTAxMTgxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjkyOWFjNDJmY2I4ZDk5Nzg4MjU5Mjk5MTk3NmNiYzY5YzllMjk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLXaZHcn+OeoRzE/glIoFDVFshT0 rwgCwBseg6htqEo9lHDlnoCaXuHN8ELDsjn5+Kp/UCpzVi9CCLYOFlioWkZcqNYf xrUDfLkRljAf3rGAxaoYGDOEAMLeuoWgCtK4swKmgKPmDEMOljt3TapW+pxte72t LQOZeWbTVWG3GbPzLVkfnmEWisDL7gCIhbth/+oqtdT6A+UCnv1+VN/9gpFBT41g CpAbx6+JZyf/9sT1HdFfg8pxZnkmQPV8z7NIy6f6LgCefQuKQADhhnbYcm592I8n 3QuuR3oMlFkZoooZNDmizQSciCDxi6+RnrjdAM73SVRgAOMlq1f0riUNBwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLuSmsQvy42ZeIJZKZGXbLxpyeKZMB8GA1UdIwQY MBaAFPDQMJi4NW//xaWX6cRbhO34fPmUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE5Bd21MZzFiX19GcFpmcHhGdUU3Zmg4LVpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kZjU2ZWUtZGQ3MS00Y2E3LTk4ZWQt MzI3ZjgzMTk0NWZkLzEvdTVLYXhDX0xqWmw0Z2xrcGtaZHN2R25KNHBrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kZjU2ZWUtZGQ3MS00Y2E3LTk4ZWQtMzI3ZjgzMTk0NWZk LzEvOE5Bd21MZzFiX19GcFpmcHhGdUU3Zmg4LVpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwd10MA0G CSqGSIb3DQEBCwUAA4IBAQBxzrqyHTUxogjT75jqkAOARnBVTRrSRuoyCi9Ns4dc 9p/nrhY7Ggrej6MPZYB3mt/9iAw6cvfGaBPzdq/b5ssKIHOriAoj1Mhn+LXkL2l3 Hin2EQuN767Mzgl/c2/VWKM8JxTLzUoL5mam4E3AwodTiM7b7vEDtYO399YlFMRO UV+iGZykS4G5mn2GNDvsUgepjOR5sodpG32/UwXhAB8BdOrELsuhFnIoD91G+0Uz mFDWg8UwfS2T9UnksFCyjfnC5Nr0Cl9rHtlYTxlwzPN4KGROedkQeMWZ1BdehrT1 mWO9zFBILNO8Z1HL+LFNfH0Dp5RlL5dhIfVo+QFCZbD5 -----END CERTIFICATE-----Generated at Mon Jan 26 14:55:15 2026 by rpki-client